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METHOD FOR OPERATING AN INTERNAL COMBUSTION ENGINE 
HAVING TORQUE MONITORING 

Field Of The Invention 

The present invention relates to a method for operating an internal combustion 
engine having the steps: setting the torque output of the internal combustion engine 
via a power actuator as a function of the signal from a driver command sender, 
forming a value for a maximum admissible torque of the internal combustion engine, 
forming a dimension figure for the actual torque of the internal combustion engine 
and comparing the dimension figure with that value, and triggering an error response 
when the actual torque exceeds the maximum admissible torque. 



10 The present invention also relates to a control unit for controlling an internal 

combustion engine using such methods, as well as a use of such a control unit for 
controlling an internal combustion engine. 



The triggering of the error response is supposed to prevent the internal combustion 
15 engine from outputting torque that deviates from the driver command, which, for 

example, reduces a desired engine braking effect, or may even lead to an undesired 
accelerating of the internal combustion engine and a vehicle driven by the internal 
combustion engine. 



20 Background Information 

Such a method, such a control unit and such a use are described in German Patent 
Application No. DE 199 00 740. This document refers to a known torque monitoring 
for an Otto engine, in which an actual torque of the internal combustion engine is 

^ determined from the rotary speed, combustion chamber charge (air mass) and the 

25 ignition angle setting. In addition, this document broadens the known torque 

monitoring to cover internal combustion engines that, at least from time to time, are 
operated using a lean fuel/air mixture. Examples of such internal combustion 
engines are Diesel engines and Otto engines having direct injection in an operation 
having stratified combustion chamber charging. Such internal combustion engines 

30 mostly operate unthrottled, so that their combustion chambers are usually charged 
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with a maximum air mass. The torque is then set via the injected fuel mass (quality 
control), whereas in Otto engines that are operated throttled the torque is set via the 
mass of the combustion chamber charge with fuel/air mixture (quantity control). 

5 It is proposed in this document, for torque monitoring in connection with a quality 
controlled internal combustion engine, to determine the actual torque based on the 
injected fuel mass as the torque-determining variable. In this context, the admissible 
torque is determined via the driver's command and/or the rotary speed from a 
characteristics map or by a simplified function model. In this context, the formation 
10 of the torque-determining signals for controlling a power actuator takes place in 
a control unit on a first program level, during the formation of the admissible 
torque within the scope of a monitoring concept on a second program level. 

However, ascertaining the torque from the driver's command, especially in 
15 internal combustion engines having fault regulators in transient operation states, 
especially upon transition into overrun condition, is not reliable, since 
(admissible) interventions of the fault regulator influence the formation of the 
control signal for a power actuator. The actual torque that results from the 
control signal, therefore, has the fault intervention superposed on it. This may 
20 lead to detection errors in the usually formed value for the admissible torque. 

An internal combustion engine control having a fault regulator is described in 
German Patent No. DE 195 37 787. The known fault regulator has a D2T2 (dye 
diffusion thermal transfer) component having operating point-dependent 

25 differential time constants and delay constants as parameters. The D2T2 

component filters the rotary speed of the internal combustion engine. Its output 
signal is linked additively with the driver's command-dependently produced 
control signal for the power actuator. Vibrations of the powertrain, that are 
perceptible as jerking, are superimposed on the rotary speed as interference. 

30 The jerking vibration of the powertrain is damped by the coupling in of the 
filtered rotary speed signal into the control signal for the power actuator. 

Because of the coupling in of the filtered rotary speed signal into the activating 
signal formation, the jerking vibration images in the control signal for the power 
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actuator, and therewith finally also in the temporal course of the torque actually 
produced by the internal combustion engine. Jerking vibrations are induced 
especially by torque changes, as appear, for instance, during transition into 
overrun condition. 

5 

In the following, by overrun condition of an internal combustion engine there is 
understood an operation in which the internal combustion engine outputs no 
torque, but rather is driven itself by external influences. Overrun condition 
appears, for instance, during braking or downhill travel of a motor vehicle, if the 
10 driver does not request any torque. The transition into overrun condition may be 
recorded, for example, by a driver's command sender, for example an 
accelerator sensor. 

The fault regulator intervenes in the control signal formation, particularly during 
15 transition into overrun condition, so that the known rotary speed monitoring, that 
is based on an evaluation of the driver's command is not reliable until the fault 
regulator intervention has decayed. In this connection it is known per se that 
one should wait about one second, in response to transition into overrun 
condition, so as to let the fault regulator intervention decay. The torque 
20 monitoring is released only after that. This torque monitoring is therefore not 
continuous. With that, the disadvantage is connected that a faulty torque 
generation is discovered only after a delay corresponding to the waiting period. 
However, for safety reasons it is desirable to detect an undesired generation of 
torque with the least possible delay, in order to be able to trigger an error 
25 response. 

Summary Of The Invention 

With a view to the related art described, an object of the present invention is to 
provide a method that makes possible both the damping of jerking and the 
30 continuous monitoring of torque. 

This object is attained by the method according to the present invention, in that a 
fault regulator intervention is superimposed upon a control signal of the power 
actuator, and that the value for the maximum admissible torque is formed from 
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linking a first approximation value to an estimated value for the torque contribution of 
the fault regulator intervention, the first approximation value being formed as a 
function of the signal of the driver's command sender. 

5 Furthermore, this object is attained by a control unit that controls such a method or 
one of the embodiments of the method. The object is also attained by the use of 
such a control unit for the damping of jerking and for monitoring torque, at least one 
of the following components being used as a power actuator: a fuel injector device, a 
throttle valve device, a variable intake valve control, an ignition device. 

10 

The computations in the control unit generally take place depending on the physical 
connection in the torque unit (driver's command torque, torque limitation, . . .) or unit 
of quantity or control signal unit (smoke limitation, quantity adjustment control). The 
connection is made via an engine efficiency characteristics map. Therefore, the 
15 considerations described herein for torques are equivalent to corresponding 
observations on quantities (fuel quantities). 

The object of the present invention is completely attained by these features. As a 
result, the security of the internal combustion engine control is increased by an error 
20 response that occurs more rapidly, if necessary. 

It is preferred that the fault regulator have a D2T2 component having operating point- 
dependent parameters. 

25 Such a D2T2 component has proven especially suitable for jerking damping. It is an 
advantage of the present invention that it can cooperate with such a component, but 
also with other phase-correcting transmission components and bandpass filters. 

It is also preferred that, during the formation of the value for the maximum admissible 
30 torque, the estimated value for the torque contribution of the fault regulator 
interventions is formed by emulating the D2T2 component. 

Because of this embodiment, the object is attained in a resource-saving manner. In 
contrast to the possibility of functionally identically duplicating the complete fault 
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regulator having operating point-dependent time constants, this embodiment 
requires less storage space and computing time (program running time) in the 
control unit. 

5 It is also preferred that, in the formation of the dimension figure for the actual torque, 
the controlled variable actually output by the power actuator is taken into account. 

Because of this embodiment, the simplified reproduction may so-to-speak be 
provided with limitations that are set by the real fault regulator. 

10 

Furthermore, it is preferred that the controlled variable that is actually output by the 
power actuator is taken into consideration by an extreme selection, in comparison to 
a duplicated controlled variable. 

15 This embodiment has the effect that extremal values created during the simplified 
duplication may be excluded by additional processing. 

It is preferred moreover that the result of the extremal selection, as in the preceding 
paragraph, is compared to a fixed value by an additional extremal selection. 

20 

This embodiment supplies the additional advantage that further processing may, for 
example, be limited to positive values, so as not to reduce the admissible torque too 
much. This prevents an excessive sensitivity in fault detection that might otherwise 
occur. 

25 

Then again, it is preferred that the estimated value of the torque contribution of the 
fault regulator intervention is formed by access to a characteristics curve that is 
addressed using the second derivative with respect to time of the rotary speed of the 
internal combustion engine. 

30 

This alternative represents a particularly simple and resource-saving alternative to 
the above named embodiments. 
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It is also preferred that, during transition into overrun condition of the internal 
combustion engine, an error response without waiting time may be triggered. 

This minimizes the speed with which a torque monitoring, that is active during the 
5 operation of the internal combustion engine, is able to trigger a fault response. 

Brief Description Of The Drawings 

Figure 1 shows, in schematic form, an internal combustion engine having actuators, 
a sensor system and a control unit. 

10 

Figure 2 shows a control unit having a sensor system and an actuator in block 
diagram representation. 

Figure 3 shows a curve over time of signals in the control unit. 

15 

Figure 4 shows an exemplary embodiment of the present invention as a block 
diagram representation. 

Figure 5 shows an alternative exemplary embodiment. 

20 

Detailed Description 

The number 10 in Figure 1 designates the overall view of an internal combustion 
engine shown schematically, having at least one combustion chamber 12. A charge 
of combustion chamber 12 is replaced via an inlet valve 14 and a discharge valve 

25 16. Fuel is metered to an air charge of combustion chamber 12 via a fuel injector 18, 
the point in time of the metering and the metered quantity being controlled by a 
control unit 20. In this context, fuel injector 18 is used as a power actuator. The 
quantity metered in determines quite essentially the torque produced by internal 
combustion engine 10. The activation of the power actuator takes place, among 

30 other things, as a function of a driver command which, via an accelerator 22, is 
recorded by an accelerator sensor 24 and passed on to control unit 20. 

Such power control is typical for a Diesel engine. A comparable power control via the 
quantity of the fuel metered in is also used in an Otto engine having direct injection in 



SUBSTITUTE SPECIFICATION 



an operation having stratified combustion chamber charging. As opposed to the 
Diesel engine, in which the injection triggers the combustion, in the Otto engine there 
is spark ignition of the combustion chamber charge, using a spark plug, for example. 

5 In an Otto engine having direct injection, which is operated in homogeneous 

operation, that is, having homogeneous mixture distribution in combustion chamber 
12, the setting of the desired torque takes place as a function of the driver command 
via the quantity of the charge of combustion chamber 12 (quality regulation). By 
analogy, this is true also for an internal combustion engine having manifold injection. 

10 

In these cases, the quantity of combustion chamber charge may be set via a throttle 
valve 26, which is operated by a throttle valve actuator 28 in a controlled manner by 
control unit 20. Throttle valve 26, in conjunction with throttle valve actuator 28, is 
then used as a power actuator. Alternatively, the quantity of the charge of 
15 combustion chamber 12 may also be controlled via a variable activation of intake 
valve 14 by an intake valve actuator 30, which is also activated by control unit 20. 
Internal combustion engine 10 also has a rotary speed sensor system 32, which may 
be made up, for example, of a pulse-generating wheel 34 having ferromagnetic 
markings 36 and an inductive sensor 38. 

20 

As shown in Figure 2, control unit 20 has a first level 40 and a second level 42, these 
levels 40, 42 corresponding in the block diagram representation of Figure 2 to 
program levels of an engine control program. The actual control program runs on 
first level 40, on which, from signals of an input-end sensor system 24, 32 and 56, 

25 controlled variables for the output-end control of actuators, such as power actuators 
18, 28 and 30 are formed. Second level 42 is used for monitoring the engine control. 
For this, it is also supplied with signals of the input-end sensor system 24, 32, 56. 
From this, and possibly from additional signals received from the first level, the 
second level forms signals for monitoring the first level. In the case of an error, it may 

30 intervene in the first level and produce a fault response there. 

On tl]e first level, first of all, a setpoint value is generated from the signals of 
accelerator sensor 24 and rotary speed sensor system 32 for the torque to be 
generated by internal combustion engine 10, and/or a corresponding base value for 
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actuator activation. This signal is subsequently filtered in a control signal-forming 
element 46 in order, for example, to smooth out abrupt changes in the accelerator 
setting (the driver command) before the activation of the actuator, control signal- 
forming element 46 may be implemented as a low-pass, for instance a PT1- 
component. This smoothing is performed in order to damp abrupt load changes that 
could generate vibrations in the powertrain. For damping such powertrain vibrations 
(damping of jerking) the signal of rotary speed sensor system 32 is supplied to a fault 
regulator 52, which forms a correction signal from it that is linked to the smoothed 
base value from block 46 in block 50. The fault regulator works as a phase- 
correcting/phase-shifting member, and therefore it emits a signal that is phase- 
shifted with respect to the signal of the control signal-forming element. The linking 
may be multiplicative as well as additive. The output signal of linkage 50 is converted 
in a block 48 to produce final activating signals for at least one of actuators 18, 28 or 
30, and is output to these actuators. 

Fault regulator 52 is preferably implemented as a D2T2 filter. Its transmission 
function, as a function of the complete frequency variable s, is then: 

output signal(s)/rotary speed(s) = k x s 2 /(1+txs) 2 , 

where k is the amplification (the constant of the D proportion) and T is the time 
constant of the deceleration portion. The variable s is the frequency. From the D2T2 
filtering (phase shifting) of the rotary speed signal, one obtains an activating signal 
component that damps the jerking of the powertrain, which is, in the manner already 
25 described, linked in linkage 50 to the filtered base value for the activation of the 
actuator. 

Since the amplitude and the frequency of jerking vibrations in motor vehicles are 
very much dependent on the operating point, one should not expect satisfactory 
30 results for all operating points by using fixed filter constants K, T. According to 

experience, the jerking vibration is strongly influenced by the respectively present 
transmission ratio step in the transmission and by the engine's rotary speed. 
Therefore, fault regulator 52 is supplied with operating point-dependent parameters 
K, T, with the aid of a parameter selection in block 54. For the selection of operating 
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point-dependent parameters, at least one signal of rotary speed sensor system 32 
and an additional signal of a sensor system 56 are supplied to block 54, from which 
the stage of the transmission, that was just inserted, may be determined. The signal 
of sensor system 56 may, for instance, be a driving speed signal v, so that from v 
5 and rotary speed n the transmission ratio and thereby the transmission ratio stage 
may be determined. 

For checking and monitoring the activating signal, formed on the first level, for 
actuators 18, 28 and 30, on second level 42, in monitoring block 58, a value is 
formed for a maximum admissible activating signal. The value, formed in monitoring 
block 58, for an admissible activating signal corresponds to a maximum admissible 
torque. This value is formed in block 58 from signals of driver command sender 24, 
rotary speed sensor system 32 and, if necessary, from control signals of the first 
level, such as values of certain parameters K, T for fault regulator 52 which are 
made available by parameter selection 54. The output signal, formed on first level 
40, of linkage 50 corresponds to a dimension figure for the actual torque of the 
internal combustion engine. This value is supplied to monitoring block 58, so that in 
block 58 there are present values for the maximum admissible torque and for the 
actual torque. If the result of a comparison of the actual activating duration (or of the 
actual torque) to the value for a maximum admissible activating signal (or a 
maximum admissible torque) is that the actual activating signal (torque) is becoming 
too great, monitoring 58 triggers a fault response by, for instance, preventing, 
blocking or changing the final activating signal formation in block 48. 

25 Figure 3 shows curves over time of signals in control unit 20 to illustrate the technical 
background of the present invention. In this context, at point t_0, a transition into 
overrun condition is triggered by accelerator sensor 24. Because of that, the output 
signal of setpoint value control 44 in Figure 2 changes more or less abruptly. This 
abrupt change is smoothed by control signal-forming element 46, which emits 

30 monotonically declining output signal 60 shown in Figure 3. The load change excites 
powertrain vibrations, which are reflected in the signal of rotary speed sensor system 
32. Via fault regulator 52, the filtered rotary speed signal of the activating signal 
formation is given negative feedback, in a certain sense, by linkage 50. In the last 
analysis, the jerking vibration is reflected thereby in the formation of the activating 
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signal for actuator 18, 28 and 30. In this context, the phase relation between the 
oscillation in the activating signal and the actual jerking vibration by the D2T2 filtering 
in fault regulator 52 is such that the jerking vibration is damped. Oscillating curve 62 
in Figure 3 shows, in a certain sense, the output signal of linkage 50, that is, the 
5 output signal of control signal-forming element 46 superposed by an intervention of 
fault regulator 52. 

By the oscillation in curve 62, monitoring threshold values, that have a fixed offset to 
signal 60, could be exceeded. For this reason, according to the related art, upon the 

10 occurrence of oscillations in signal 62, torque monitoring does not take place. As 
may be seen in Figure 3, the oscillation in signal 62 decays with increasing time, so 
that, approximately beginning at time t_1 , an activating signal curve is present again 
which is accessible to the known monitoring. In the known monitoring, these 
relationships are taken into consideration in that the torque monitoring, especially the 

15 safety-critical overrun condition monitoring (torque monitoring in overrun operation) 
is deactivated in the time span between t_0 and t_1. This time span of the decaying 
of the oscillation in the activating signal has a length of the order of magnitude of one 
second. 

20 Together with a view of Figure 4, it will be explained below, within the scope of an 
exemplary embodiment of the present invention, how this undesired waiting period 
may be avoided. Figure 4 essentially shows the functional procedure of second level 
42 of control unit 20, or rather its program structure, in greater detail. In addition, 
Figure 4 shows how first level 40 and second level 42 interact with each other. The 

25 signal of inductivity sensor 38 of rotary speed sensor system 32 is supplied in control 
unit 20 to an in-series connection of two DT1 components 68 and 70. To the two 
DT1 components 68, 70 in level 2, extremal values of amplification constant K and 
time constant T of D2T2 component from the first level are supplied by parameter 
selection 54 in Figure 1. In this context, the extremal values represent in each case 

30 values that lead to extreme activating signals and, thus, torques. In other words, in 
level 2, the D2T2 component from level 1 is duplicated in simplified form, the 
simplification relating to the use of fixed parameters K, T that lead to extreme values 
of the torque. 
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The output signal of the D2T2 component from level 1 , duplicated by blocks 68 and 
70, is subsequently processed further by four successive extremal value selections. 
In this context, the output signal of block 70, in a first extremal selection of block 72, 
is limited to an upper value that is plausible as to its absolute value, that is made 
5 available by block 74. In the second extremal value selection of block 76, there 
subsequently takes place an absolute value limitation to a lower plausible limiting 
value. An additional extremal value selection in block 80 is post-connected to this 
limitation to a lower limiting value. To block 80 are supplied the intervention formed 
on the first level by fault regulator 52 and the output signal of block 76. Block 80 

10 selects the smaller value in absolute amount from these two values. Subsequently, 
there takes place an additional extremal value selection in a block 82, in which the 
output value of block 80 is compared to a fixed value that is made available by block 
84. This fixed value is preferably 0. By this fixed value 0 one may distinguish 
between torque increasing and torque decreasing interventions by fault regulator 52. 

15 Within the scope of monitoring, since one is only interested in the detection of 

torque-increasing influences, one may, so to speak, segregate out the uninteresting 
contributions of fault regulator 52 by the extremal value selection in block 82. 

The value formed by these four extremal value selections 72, 76, 80 and 82 is 
20 subsequently linked in linkage 86, as the estimated value for the torque contribution 
of the intervention of fault regulator 52, to a first approximation value for the 
maximum admissible torque, which is made available by block 88. Block 88 on level 
2 receives signals of accelerator sensor 24 and inductivity sensor 38, and, using 
these input signals, emulates the behavior of setpoint value control 44 and control 
25 signal-forming element 46 from level 1 . In other words: in block 86, an estimated 
value for the torque contribution of the intervention of fault regulator 52 is 
superimposed on this first approximation value. The result of the superimposition is 
compared in block 90 to a dimension figure for the actual torque of the internal 
combustion engine from level 1 . This dimension figure may, for instance, be the 
30 value which is made available in level 1 by linkage 50. If, in block 90, the dimension 
figure for the actual torque exceeds the value for a maximum admissible torque, 
block 90 triggers a fault response via a connection to activating signal formation 48, 
such as a limitation or a blocking of activating signal formation. 
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For further illustration, in the following we assume that linkage 86 represents a 
subtraction in which the output signal of block 82 is subtracted from the first 
approximation value, which is emitted by block 88. Measured in arbitrary units, say 
that the output signal of block 70 is -2, for example. On level 1 , such a negative 
5 output value of fault regulator 52 would lead to a reduction in the activating signal for 
power actuators 18, 28 or 30. Using the adopted sign convention, the extremal value 
selection in block 72 corresponds to a maximum value selection. To this maximum 
value selection there is then supplied, for instance, the value -3 as the upper 
plausible boundary. Consequently, block 72 selects the value -2 from the two 

10 quantities -3 and -2 and passes this on to block 76. Using the selected sign 

convention, block 72 corresponds to a minimum value selection. As a plausible value 
for a lower boundary of the fault regulator intervention, block 78, for example, makes 
available the value -1 for block 76. Block 76 selects the minimum value -1 from the 
values -2 and -1 present, and passes this on to block 80, which at this sign 

15 convention is implemented as a maximum value selection. 

Let us say that fault regulator 52 from Figure 1 supplies the value -1 to block 80. 
Block 80 selects the maximum -1 from the values -1 and -2 present. In this way the 
estimated value for the intervention of fault regulator 52, as it is developed as an 

20 estimated value on level 2, is limited to the actual value as it is developed on level 1 . 
This increases the sensitivity of the monitoring. After that, there takes place in block 
82 an additional minimum value selection. For this, a block 84 makes available to 
block 82 a fixed value, preferably the value 0. Therefore, block 82 selects the value - 
1 from the values -1 and 0 that are present. This value -1 is subtracted in linkage 

25 86, and is thereby added in absolute value. The absolute value added thus 

represents an offset which is superimposed on the approximation value from block 
88 in order to make available a threshold value for block 90. 

Figure 5 shows a more simplified alternative for estimating the intervention torque of 
30 fault regulator 52. For this, the output signal of inductive sensor 38 of rotary speed 
sensor system 32 in block 92 is differentiated twice with respect to time. The second 
time differential thus formed of the rotary speed is used for addressing a 
characteristics curve 93 in block 94, which supplies the maximum fault regulator 
intervention torque by which the admissible torque of level 2 is increased. 
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Correspondingly, the maximum fault regulator intervention torque, emitted by block 
94, is added, in linkage 86, to a first approximation value which, as described above, 
was formed on level 2 based on signals of rotary speed sensor system 32 and of the 
driver's command. The sum is subsequently transferred to a block 90, which has the 
5 same function as block 90 in Figure 4 
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